Use Azure Active Directory Managed Identities for your services! - Option 2

 
English Advanced Security

Are you using some OAuth2 service to secure your application? Also using Azure Active Directory Managed Identities for accessing Azure resources? Awesome! But how about your backend services? Did you know you can also use Managed Identities to perform authentication & authorization on your own API's? Configuring your services and AAD to use Managed Identities can be quite a struggle. Let me show you what needs to be set up in your application and AAD to get you started. When everything is set up correctly you can manage the access to all of your API's via Azure Active Directory and even restrict access to specific endpoints if you want. You'll leave this session knowing how to set up your services by using the built-in capabilities of Azure and make your complete environment more secure and easy to manage.

Speaker

Jan de Vries

Cloud Solution Architect/Developer at 4DotNet

Jan has been developing software for well over a decade. Currently, he is working at 4DotNet as a Cloud Solution Architect/Developer and is awarded by Microsoft with the Microsoft MVP award. His main focus is on developing highly performant and scalable solutions using the awesome services provided by the Microsoft Azure platform. Because of his expertise, he has been able to help out multiple customers to bring their on-premise solution to the cloud and guide them towards a better software development ecosystem. Whenever Jan finds something interesting to write about, he shares his findings on his blog (https://jan-v.nl).

Code of Conduct

We seek to provide a respectful, friendly, professional experience for everyone, regardless of gender, sexual orientation, physical appearance, disability, age, race or religion. We do not tolerate any behavior that is harassing or degrading to any individual, in any form. The Code of Conduct will be enforced.

Who does this Code of Conduct apply to?

All live stream organizers using the Global Azure brand and Global Azure speakers are responsible for knowing and abiding by these standards. We encourage every organizer and attendee to assist in creating a welcoming and safe environment. Live stream organizers are required to inform and enforce the Code of Conduct if they accept community content to their stream.

Where can I get help?

If you are being harassed, notice that someone else is being harassed, or have any other concerns, report it. Please report any concerns, suspicious or disruptive activity or behavior directly to any of the live stream organizers, or directly to the Global Azure admins at global@globalazure.net. All reports to the Global admin team will remain confidential.

Code of Conduct for live streams

We encourage local organizers to set up and enforce a Code of Conduct for all Global Azure live stream. A good template can be found at https://confcodeofconduct.com/, including internationalized versions at https://github.com/confcodeofconduct/confcodeofconduct.com. An excellent version of a Code of Conduct, not a template, is built by the DDD Europe conference at https://dddeurope.com/2020/coc/.